Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
File:                     Pa__vH6RLp_80qLg2SCOvJlwmyI.mft (raw, json)
Hash identifier:          qqhyGmUKwMRdb/9wOvnJ0fB38LKu0y+HoBH5J3/Df9U=
Subject key identifier:   0D:55:24:87:15:CE:13:31:1B:7B:68:47:A9:E5:BA:71:CF:35:98:58
Authority key identifier: 3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22
Certificate issuer:       /CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22
Certificate serial:       0738
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
Manifest number:          070B
Signing time:             Sat 14 Nov 2026 21:58:36 +0000
Manifest this update:     Sat 14 Nov 2026 21:58:36 +0000
Manifest next update:     Sat 21 Nov 2026 21:58:36 +0000
Files and hashes:         1: Pa__vH6RLp_80qLg2SCOvJlwmyI.crl (hash: q45ZHTWIGNtizivj/v/OQoVoYiHYHgmc7o3Zkyw6N6M=)
                          2: 0CDA881EAF0311EB96FC344BC4F9AE02.roa (hash: RPxOFfJjrOI7UQCih5XD3UyksK+kJQvkuxdpxXN2aCA=)
                          3: 5D49C24CAF1211EB8138312CC4F9AE02.roa (hash: 7XSAJ5hjV3Ry25KSKjWRYUvmtT9x2Es9AARQ//LGNkw=)
                          4: 5DE13E6AAF1211EB8138312CC4F9AE02.roa (hash: ps3tktTEk2EDSAZPtq4icwHfRPp4LkgQtF5M4/9VUfg=)
                          5: 96D7EE96AF0111EB8FE37446C4F9AE02.roa (hash: 8Yqf3JX8Y3L08kOO3n7OKafVeSiSafA9K5AVaKiVg0g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl
                          rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 21:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1848 (0x738)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179B50, serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22
        Validity
            Not Before: Nov 14 21:58:36 2026 GMT
            Not After : Nov 21 21:58:36 2026 GMT
        Subject: CN=6af8d98c-b1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8e:01:d2:88:4e:05:3a:98:b2:84:75:ab:9e:
                    1d:ba:3e:3f:e0:ea:7e:f2:ff:f0:07:42:b6:2c:86:
                    4a:46:7d:e2:01:f9:1b:56:f1:72:77:90:f4:23:19:
                    44:6a:ce:5d:b9:f3:5f:77:f8:04:cc:08:6f:1a:3d:
                    8c:07:e0:37:1f:e4:0c:d4:86:11:f6:2f:d6:06:65:
                    70:11:8c:28:74:69:b8:46:88:20:f3:8f:81:f0:76:
                    8e:89:69:d0:e5:b1:a0:17:03:24:ad:d9:4b:14:b0:
                    57:83:08:1e:d9:c7:66:66:4b:45:a9:0e:d5:7f:de:
                    4b:c7:df:ec:b2:61:7e:18:8a:a9:a3:29:85:1f:b5:
                    ad:ee:b6:49:14:f6:c5:8d:7c:1e:e7:24:36:fb:e3:
                    96:f2:90:6f:19:7e:5b:85:41:79:6c:00:db:7c:29:
                    d2:48:76:6d:46:72:63:03:d1:fb:ab:fd:94:25:bd:
                    27:65:e6:14:53:33:40:2e:08:89:bd:ec:8c:d7:db:
                    8e:26:d8:7c:76:2b:a6:82:94:d4:42:1a:ba:87:79:
                    d9:7f:68:12:47:a2:20:e9:f7:43:17:e9:e5:8b:af:
                    06:ee:bb:10:c9:ce:44:a8:ca:e4:85:c8:d5:6b:f0:
                    7d:12:99:34:de:db:fd:49:2d:17:94:b1:ae:5a:4e:
                    07:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:55:24:87:15:CE:13:31:1B:7B:68:47:A9:E5:BA:71:CF:35:98:58
            X509v3 Authority Key Identifier:
                keyid:3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d1:3e:84:4b:50:58:e6:9b:f1:38:62:5f:e4:24:d7:fa:96:
         40:45:e0:54:34:3e:ed:3e:33:8e:63:b1:58:c0:6e:3b:5a:08:
         51:87:c7:86:a7:81:36:54:b9:60:b0:f3:11:77:2a:7a:40:14:
         ce:1d:13:f3:e4:c4:48:1e:a2:3c:1b:ac:fa:e5:7c:33:ca:d4:
         b8:96:62:d9:6b:ea:02:72:48:8c:8a:e3:3c:62:0c:8c:5c:42:
         3c:87:44:3c:64:36:5d:22:93:18:6f:59:61:32:77:f8:b8:7d:
         30:3f:cf:a3:09:af:cd:b4:81:61:5d:d9:e5:4a:49:b8:ff:2f:
         7f:cf:b7:42:16:b8:56:fb:4d:6a:70:b3:65:79:bb:28:f2:86:
         b3:8d:e9:7d:da:ee:56:0b:0b:3e:22:e1:f5:fd:b2:9e:e8:27:
         7b:5b:5d:33:83:d0:04:04:0a:ba:38:70:54:7e:23:27:39:f5:
         33:d7:b0:14:69:cc:16:9d:79:b5:86:b9:58:8b:b4:68:91:f1:
         47:14:96:72:69:ba:1d:11:e5:d7:00:c9:6e:cc:34:a0:e1:0f:
         9f:26:ce:7e:db:66:c6:fc:03:2a:31:9f:eb:af:1f:35:b7:42:
         98:1c:78:e6:b2:03:41:17:21:53:c9:7f:00:4c:46:86:95:d4:
         b1:69:56:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:12:06 2026 by rpki-client